kettle-family 1.2.6 → 1.2.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 87022fba999d5343044afcf1c679be7b53f49648ce71ff7aebfe29044ee6064a
-  data.tar.gz: 775df5e0ce6843e9013fbe7a4cc17ea2608322aae8139f9116f51a456051a5b8
+  metadata.gz: 19b26885149b9d09b09827174cd7da61443ce3be6eb87aebbf31c2d742d169f8
+  data.tar.gz: d3f3f4d99d7206c755dd8c96b92849056f85bf25b43e261322ee9d90c2ac6021
 SHA512:
-  metadata.gz: 258275ea92c47f043220780188c6967427e700bf66f7e8675700ac39d4ffb4a7da775a809a587babfa839f32778bc81e4b525f2f33f839648cf11be1be1b239c
-  data.tar.gz: ec9fd4d7a541edd9f82b4bb9e57510563f264b5893734814c27a6eae24f3af4ca05fbd80baa1986de388ab6a4b83daa4bbfafae3117bf748693fe50a2261a2d3
+  metadata.gz: 967f83669fc06f840e9aafdfbf3ee93257371e1e5b18097e6d2740247fad82f09c1f64930b1a7558456a41f2f3991172ec6a4cfb6d00c797929172ac72486ca3
+  data.tar.gz: 2e65f50bfd16933521b93dfd8b3d84ef3c3faa9cb7e40725c917e83f4e53d833bbc09f2f2b15708c4a93f9a384edb5f24b1bbdf4b05013f4c4d19879382b9ba4

data/CHANGELOG.md

@@ -30,6 +30,20 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [1.2.7] - 2026-07-29
+
+- TAG: [v1.2.7][1.2.7t]
+- COVERAGE: 93.98% -- 3650/3884 lines in 27 files
+- BRANCH COVERAGE: 76.43% -- 1394/1824 branches in 27 files
+- 28.01% documented
+
+### Fixed
+
+- `kettle-family bup`, `bupb`, and release lockfile handling now treat truthy
+  `*_DEV` and `*_LOCAL` environment values as local path dependency mode, so
+  family local path envs such as `STRUCTUREDMERGE_DEV=true` are disabled for
+  release-style bundle refreshes.
+
 ## [1.2.6] - 2026-07-29
 
 - TAG: [v1.2.6][1.2.6t]
@@ -1276,7 +1290,9 @@ Please file a bug if you notice a violation of semantic versioning.
 - Fixed CI load failures on engines without compatible `pty` support by falling back to Open3 for interactive release commands.
 - Fixed Ruby 3.2 version-bump support by loading Prism lazily and wiring the Prism gem only for MRI versions that need it.
 
-[Unreleased]: https://github.com/kettle-dev/kettle-family/compare/v1.2.6...HEAD
+[Unreleased]: https://github.com/kettle-dev/kettle-family/compare/v1.2.7...HEAD
+[1.2.7]: https://github.com/kettle-dev/kettle-family/compare/v1.2.6...v1.2.7
+[1.2.7t]: https://github.com/kettle-dev/kettle-family/releases/tag/v1.2.7
 [1.2.6]: https://github.com/kettle-dev/kettle-family/compare/v1.2.5...v1.2.6
 [1.2.6t]: https://github.com/kettle-dev/kettle-family/releases/tag/v1.2.6
 [1.2.5]: https://github.com/kettle-dev/kettle-family/compare/v1.2.4...v1.2.5

data/README.md

@@ -814,7 +814,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]: https://gitmoji.dev
 [📌gitmoji-img]: https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-3.882-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-3.884-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: https://github.com/kettle-dev/kettle-family/blob/main/SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/lib/kettle/family/version.rb

@@ -5,7 +5,7 @@ module Kettle
     # Version namespace for this gem.
     module Version
       # Current gem version.
-      VERSION = "1.2.6"
+      VERSION = "1.2.7"
     end
     # Current gem version exposed at the traditional constant location.
     VERSION = Version::VERSION # Traditional Constant Location

data/lib/kettle/family/workflow.rb

@@ -1945,7 +1945,8 @@ module Kettle
       def release_allowed_local_path_roots
         release_local_path_env_sources.filter_map do |key, value|
           next unless key.end_with?("_LOCAL", "_DEV")
-          next if value.to_s.empty? || value.to_s.casecmp("false").zero?
+          next unless local_path_env_value?(value)
+          next unless value.to_s.strip.start_with?("/", "./", "../", "~")
 
           value
         end
@@ -2025,6 +2026,7 @@ module Kettle
       def local_path_env_value?(value)
         text = value.to_s.strip
         return false if text.empty? || text.casecmp("false").zero?
+        return true if %w[true yes 1 on enabled].include?(text.downcase)
         return true if text.start_with?("/", "./", "../", "~")
 
         text.include?(File::SEPARATOR)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kettle-family
 version: !ruby/object:Gem::Version
-  version: 1.2.6
+  version: 1.2.7
 platform: ruby
 authors:
 - Peter H. Boling
@@ -341,10 +341,10 @@ licenses:
 - AGPL-3.0-only
 metadata:
   homepage_uri: https://kettle-family.galtzo.com
-  source_code_uri: https://github.com/kettle-dev/kettle-family/tree/v1.2.6
-  changelog_uri: https://github.com/kettle-dev/kettle-family/blob/v1.2.6/CHANGELOG.md
+  source_code_uri: https://github.com/kettle-dev/kettle-family/tree/v1.2.7
+  changelog_uri: https://github.com/kettle-dev/kettle-family/blob/v1.2.7/CHANGELOG.md
   bug_tracker_uri: https://github.com/kettle-dev/kettle-family/issues
-  documentation_uri: https://www.rubydoc.info/gems/kettle-family/1.2.6
+  documentation_uri: https://www.rubydoc.info/gems/kettle-family/1.2.7
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/kettle-dev/kettle-family/wiki
   news_uri: https://www.railsbling.com/tags/kettle-family